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SPECIFICATION 



ELECTRONIC INFORMATION BACKUP SYSTEM 



TECHNICAI. FIELD 

The present invention relates to a backup system utilizing 
computers and information communication and more specifically 
to a backup and recovery system for electronic value information 
such as electronic cash and electronic ticket. 

BACKGROUND ART 

The technology to express and utilize money or information 
having monetary value such as electronic money or electronic 
ticket in the electronic format has recently grown up as the 
ordinary technology. Electronically expressed value 
information such as electronic cash or electronic ticket will 
be called later as electronic value information. 

As a method of expression;^ an electronic value information 
is set on a server installed in distant area and an owner of 
this electronic value information has only an authentication 
information and makes communication with the server at the time 
of application. This method however has a problem that safe 
transaction can be realized by assuring sufficient safety in 
the authentication but electronic value information can be used 
only in the condition that the system may be connected to the 
network and also has a problem that inquiry to the network is 
generated for each application and thereby it is difficult to 
adapt this method to the condition that requires high speed 
response . 
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Therefore, in view of utilizing the electronic value 
information even under the condition that is independent of the 
network, there has been proposed a technique for holding 
electronic value information itself on devices such as IC card^ 
hand-held telephone set and hand-held terminal carried by an 
owner of electronic value. However, in this case, there is a 
risk of losing electronic value information due to destruction 
and missing of devices. 

In order to realize recovery from the problem of 
destruction of electronic information including electronic 
value information explained above, several technologies have 
already been proposed. Examples of such prior arts will be 
explained below. 

In the technology disclosed in the JP-A No. HlO-133925 
as the first related art, data can be backed up for the backup 
server installed at the outside of fire wall from the inside 
thereof by utilizing an encrypted mail. However, in this 
technique, a recovery method from the encrypted data when the 
key is lost or broken is not considered. 

In the technology disclosed in the US Patent No. 5, 778, 395 
as the second related art, files of node (computer) connected 
to the network are backed up through compression and encryption 
to the server on. the other node. However, in this technique, 
recovery of data when the key is lost or broken is not considered 
as in the case of the first related art. 

As explained above, the related arts have been intended 
to realize backup and recovery of electronic information in the 
condition that it is concealed by encryption. However ; the 
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related explained above is accompanied by a problem that loss 
or breakdown of device storing electronic information including 
a key information cannot be covered because it is not considered 
to recover the encryptedbackup information when the key 
information used for encryption is lost. 

Moreover, even when a key used for decoding the encryption 
to cover the problem explained above can be simply backed up, 
a measure for illegal action to deteriorate reliability for 
backup management of key such as conspiracy by the server keeping 
the key and the server keeping the encrypted electronic value 
information must be considered, 

DISCLOSURE OF THE INVENTION 

An object of the present invention is to provide an 
electronic informationbackup system that can safely backup 
electronic value information on a server through communication, 
reject illegal action at the time ofbackup and recovery and 
recover electronic value information from backup at the time 
of emergency such as the case where the key information is lost* 

According to the present invention, there is provided a 
system that encrypts an electronic value information and then 
resisters this information to an electronic value information 
to receive a registration certificate. Next, the system 
presents the registration certificate to the server to receive 
the encrypted electronic value information in view of decoding 
such encrypted electronic value information with a decoding key 
that is decoded to the data . The decoding key may be kept within 
a user or in the server or in the other server. Moreover, it 




is also possible that the electronic value information is 
divided and moreover the decoding key is divided and these are 
integrally or partially kept in the same server or in individual 
servers separately. Moreover, it is also possible that the 
stream of encryption that is the source of decoding key is kept 
in a server and thereby a terminal can regenerate the decoding 
key from such stream of encryption using a decoding key 
generation algorithm. If the decoding key is lost, such 
decoding key can be received from the server when inspection 
of the owner authentication information is completed 
successful . 

BRIEF DESCRIPTION OF DRAWINGS 

Fig. 1 is a structural diagram of an electronic 
inf ormationbackup system in a first embodiment of the present 
invention. 

Fig. 2 is a schematic diagram of an electronic value 
information, a digest information and a registration 
certificate in the first embodiment of the present invention. 

Fig. 3 is a schematic diagram illustrating a management 
method of electronic value information and registration 
certificate on an electronic wallet means in the first 
embodiment of the present invention. 

Fig. 4 is a schematic diagram illustrating an information 
storage method in an electronic safe storage means in the first 
embodiment of the present invention. 

Fig. 5 is a structural diagram of an electronic information 
backup system in a second embodiment of the present invention. 
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Fig, 6 is a schematic diagram of a registered electronic 
value information and a registration certificate in the second 
embodiment of the present invention. 

Fig . 7 is a schematic diagram illustrating a storage method 
of an encryption key and a decoding key on a key storage means 
in the second embodiment of the present invention. 

Fig, 8 is a schematic diagram illustrating a management 
method of a key information on a key management storage means 
in the second embodiment of the present invention. 

Fig, 9 is a schematic diagram illustrating an information 
storage method in an electronic safe storage means in the second 
embodiment of the present invention. 

Fig. 10 is a structural diagram of an electronic 
information backup system in a third embodiment of the present 
invention . 

Fig. 11 is a structural diagram of an electronic 
information backup system in a fourth embodiment of the present 
invention . 

Fig. 12 is a structural diagram of an electronic 
information backup system in a fifth embodiment of the present 
invention. 

Fig, 13 is a structural diagram of an electronic 
information backup system in a sixth embodiment of the present 
invention. 

Fig. 14 is a structural diagram of an electronic 
information backup system in a seventh embodiment. 

Fig. 15 is a structural diagram of an electronic 
information backup system in an eighth embodiment of the present 




invention. 

Fig. 15 is a structural diagram of an electronic 
inf ormationbackup system in a ninth eitibodiment of the present 
invention. 

Fig. 17 is a structural diagram of an electronic 
information backup system in a tenth embodiment of the 
present invention. 

Fig. 18 is a structural diagram of an electronic 
information backup system in an eleventh embodiment of the 
present invention . 

Fig. 19 is a schematic diagram illustrating electronic 
value information group on the electronic wallet storage means 
in the eleventh embodiment of the present invention. 

Fig. 20 is a schematic diagram illustrating electronic 
value information group on the electronic wallet storage means 
in the eleventh embodiment of the present invention. 

Fig. 21 is a structural diagram of an electronic 
inf ormationbackup system in an twelfth embodiment of the present 
invention . 

PREFERRED EMBODIMENTS OF THE INVENTION 

The present invention discloses, first, that a local 
electronic value information is registered to an electronic safe 
server to receive a registration certificate thereof and such 
registration certificate is presented to the electronic safe 
server to obtain the corresponding electronic value information. 
Thereby, if the local electronic value information is destroyed, 
such electronic value information can be recovered. 
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The present invention discloses^, second, the local 
electronic value information is encrypted and is then backed 
up on the electronic safe server. Thereby, the electronic value 
information can be backed up under the condition that it is 
shielded within the electronic safe server and even if the local 
electronic value information is destroyed, the electronic value 
information can be recovered. 

Third, the present invention discloses that decoding 
keys for decoding the encrypted electronic value information 
are backed up in different electronic safe servers. Thereby, 
the electronic value information can be stored more safely. 

Fourth, the present invention discloses that an 
electronic value information is divided and the divided 
information pieces are then backed up in different electronic 
safe servers . Thereby, difficulty for illegally obtaining such 
decoding keys by tapping of all communication paths or illegal 
entry to all electronic safe servers during thebackup operation 
becomes very high. Moreover, when independency of respective 
electronic safe servers is high, possibility for illegal 
recovery of the decoding keys due to the conspiracy of the 
electronic safe server management personnel can also be lowered. 

Fifth, the present invention discloses that a plurality 
of electronic value information pieces are combined and then 
encrypted and thereby these encrypted information pieces are 
backed up in the electronic safe servers and such combined 
information is isolated when it is obtained from the electronic 
safe server and is then recovered as the electronic value 
information. Thereby, difficulty for illegally obtaining such 




decoding keys by tapping of all communication paths or illegal 
entry to all electronic safe servers during thebackup operation 
also becomes very high* Moreover^ when independency of 
respective electronic safe server is high, possibility for 
illegal recovery of the decoding keys by conspiracy of the 
electronic safe server management personnel can also be lowered. 

Sixth, the present invention discloses that the decoding 
key is divided and one divided decoding key is backed up in one 
electronic safe server, while the other divided decoding key 
is backed up in the other electronic safe server. Thereby, 
difficulty for illegally obtaining the decoding keys by tapping 
of all communication paths and illegal entry to all electronic 
safe servers during the backup operation also becomes high. 
Moreover, when independency of respective electronic safe 
servers is high, possibility for illegal recovery of the 
decoding keys by conspiracy of the electronic safe server 
management personnel can be lowered. 

Seventh, the present invention discloses that an original 
cryptographic seed information to be used for arithmetic 
generation of decoding keys is backed up in the electronic safe 
server, such cryptographic seed information is received from 
the electronic safe server at the time of recovery and the 
decoding key is generated from the cryptographic seed 
information via the decoding key generation algorithm. Thereby, 
safety not only electronic value information but also for 
decoding key becomes extremely high. 

The present invention enables, eighth, acquisition of 
electronic value information from the electronic safe server 
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when the owner information is matched with the authentication 
information. Thereby, even if the decoding key is lost or data 
cannot be extracted because terminals are destroyed, the 
decoding keys can be obtained from the electronic safe servers 
to recover the electronic value information. 

Ninth, the present invention discloses that the 
electronic value information is selected depending on the 
presetbackup conditions. Thereby, since the electronic value 
information to be backed up is selected automatically based on 
the preset conditions in place of manual selection by a user, 
a load of user can be alleviated and thereby the memory capacity 
of terminals and cost (time, expense) required for communication 
can also be controlled. 

Tenth, the present invention discloses that since a set 
of electronic value information and decoding key is returned 
through communication between the electronic safe servers when 
the owner is authenticated as the correct information owner 
through the authentication in such a case that the electronic 
value information and decoding key are stored in different safe 
servers for keeping the safety, the electronic value information 
can be recovered even in the case where the decoding key is lost 
and the data cannot be extracted because the terminals are 
destroyed. Moreover, when the electronic value information is 
not used immediately, such information can be returned to the 
preceding condition by encrypting the electronic value 
information using a new encryption key and then sending the 
encrypted information to one electronic safe server and the 
other decoding key the other electronic safe server. 
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EMBODIMENT .q 

The preferred embodiments of the present invention will 
be explained with reference to the accompanying drawings. The 
present invention is not limited only to these embodiments and 
may be modified and embodied within the scope not departing from 
the subject matter thereof. Each figure will be indicated as 
Fig. 1, Fig. 2, 

FIRST EMRODTMPINT 

The first embodiment in relation to first, second, and 
third aspect of the present invention will be explained with 
reference to Fig. 1, Fig. 2, Fig. 3 and Fig. 4. Fig. 1 is a 
structural diagram illustrating an example of the electronic 
informationbackup system explained in this first embodiment. 
This system is assumed to be basically composed of computers 
connected with the wired or wireless communication path, 
external extension devices and softwares operating on these 
elements. Here, a computer is the general name of the devices 
including a CPU operating depending in the software programs. 

In this first embodiment, an electronic wallet means 101, 
an electronic wallet storage means 102, an electronic 
information registration means 106 and an electronic 
information recovery means 107 are comprised within an IC card 
501 . A terminal 100 is a portable telephone terminal comprising 
an IC card reader/writer and is capable of making communication 
with the electronic information registration means 106 and 
electronic information recovery means 107 formed within the IC 
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card 501. The terminal 100 can communicate with the electronic 
safe means 103 as the server through the wireless link. Moreover, 
the terminal 100 may be replaced with a personal computer 
comprising the IC card reader or a set-top box or a portable 
personal computer • 

Communication between the terminal 100 and electronic 
safe means 103 may be executed with the wired link. It is also 
possible to structure the device having the identical function 
to that of the IC card 501 within the terminal 100. 

The electronic wallet means 101, electronic information 
registration means 10 6 and electronic information recovery 
means 107 are realized with the software, storage region for 
storing this software and OS for executing this software by 
interpreting it and CPU. Moreover, the electronic wallet means 
101 is capable of making reference to the content of the 
electronic wallet storage means 102 and also capable of changing 
the content. The electronic wallet storage means 102 can be 
realized with a programmable memory such as EEPROM. 

An electronic value information means an electronic 
information such as electronic cash, electronic ticket and 
electronic coupon or the like and the registration certificate 
means an electronic information indicating a duplicate of the 
electronic value information issued when the electronic value 
information is registered to the electronic safe means 103. Fig. 
3 illustrates a management method of electronic value 
information and registration certificate in the electronic 
wallet storage means 102. The electronic wallet means 101 
places an index 851 on the electronic wallet storage means 102. 
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The index 851 suinmarizes the pointers for the information stored 
in the electronic wallet storage means 102, size of information 
and a' set of the signs indicating a class of the information 
indicated with the pointer. Using this index 851, the 
electronic wallet 101 can realize the functions explained below. 

The electronic wallet means 101 obtains the pointer and 
size with reference to the index 851 in the electronic wallet 
storage means 102 and can extract the electronic value 
information or registration certificate using the pointer and 
size acquired^ The electronic wallet means 101 obtains all 
pointers and sizes with reference to the index 851 in the 
electronic wallet storage means 102; and also acquires all 
electronic value information pieces and titles of the 
-registration certificates using such pointers and sizes. It 
is also possible to generate a list of all storage information 
pieces using the pointers, sizes and titles. Moreover, it is 
also possible to generate a list of the information matched with 
the conditions (for example, the list of the registration 
certificates and the list of information within the remaining 
one week until the end of effective period) by obtaining the 
pointers and sizes matched with the particular conditions. 

Moreover, the electronic wallet means 101 writes the 
electronic value information or registration certificate in the 
vacant region in the electronic wallet storage mans 102 and adds 
the entry of a set of the corresponding class, pointer and size 
to the index 851 in view of storing the electronic value 
information or registration certificate to the electronic 
wallet storage means 102 • On the contrary, the electronic value 



information or registration certificate can be deleted from the 
electronic wallet storage means 102 by erasing the region 
indicated with the pointer and size and then deleting the entry 
corresponding to the pointer and size from the index 851 with 
reference to the pointer and size indicated in the index 851. 
Moreover, the electronic value information or registration 
certificate information can be corrected by combining the new 
registration and deletion. The process explained above may 
also be realized using the functions of the file system of the 
operating system (OS) on the IC card 501. 

The electronic information registration means 105 is 
composed of a software, a storage region for storing this 
software, an OS for interpreting and executing this software 
and a CPU. This electronic information registration means 106 
and electronic wallet means 101 can use the OS and CPU in common. 
The electronic information registration means 106 obtains the 
electronic value information from the electronic wallet means 
101 and registers the registration certificate to the electronic 
wallet means 101. Moreover, obtains a list of the electronic 
value information from the electronic wallet means 101. 

The electronic information recovery means 107 can be 
composed of a software, a storage region for storing this 
software, an OS for interpreting and executing this software 
and a CPU. Here, the electronic information recovery means 107 
and electronic wallet means 101 can use OS and CPU in common. 
The electronic information recovery means 107 acquires the 
registration certificate from the electronic wallet means 101 
and registers the electronic value recovery information to the 
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electronic wallet means 101. In addition, the electronic 
information recovery means 107 acquires a list of the 
registration certificate from the electronic wallet means 101. 

The electronic safe means 103 is composed of a computer 
such as a work station or a personal computer and a software 
operating on the computer system. The electronic safe means 
1103 can refer to the content of the electronic safe storage 
means 110 and modifies such content. The electronic safe 
storage means 110 is a storage device having the content to be 
referred or modified from the electronic safe means 103 and may 
be realized with a hard disc. On the electronic safe storage 
means 110, a file system under the management of the computer 
system OS is established. 

Fig. 2(a) illustrates the electronic value information 
201 as an example of the electronic value information. When 
the electronic safe means 103 accepts a registration request 
of the electronic value information 201, it generates a 
registration certificate 301 using the electronic value 
information 201. The flow of process to generate the 
registration certificate 301 will be explained below. - 

The electronic safe means 103 generates a digest 302 
illustrated in Fig. 2(b) from the electronic value information 
201 based on the setting. Moreover, the means 103 also generates 
the value XI by applying the electronic value information 201 
to the uni-directional Hash function. The value Yl is obtained 
with reference to a counter of the electronic safe means 103. 
The counter increases one by one in the ascending sequence and 
returns to 0 when the value reaches the upper limit. These 
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digest 302, Hash value XI and counter value Yl are set as the 
registration certificate 301 . Here, MD5 and SHA 1 having higher 
dispersion property are used as the Hash function to generate 
the value XI. The digest 302 may be a vacant information. 

Fig. 4 illustrates a method of storing information on the 
electronic safe storage means 110. The electronic safe means 
103 stores the electronic value information 201 to the 
electronic safe means 110 as a file 801 and the registration 
certificate 301 as a file 802. A path information of the Hash 
value XI, counter value Yl and file 801 as the structural element 
of the registration certificate 301 and a path information of 
file 802 are formed as a set and this set is then registered 
as an entry of the index file 852. The index file 852 is a 
single-line CSV file for one entry and each line is sorted in 
the ascending sequence with the counter value. When the 
registration certificate is presented to the electronic safe 
means 103 from the terminal 100, the electronic safe means 103 
searches the entry group where the electronic value information 
corresponding to the registration certificate is matched with 
the count value from the index file 852 in the electronic safe 
storage means 110 and further squeezes such entry group to the 
entry group where the Hash value is matched and then extracts 
the entry where the registration certificate is perfectly 
matched. Thereby, it is now possible to search the electronic 
value information corresponding to the registration certificate 
at a high speed. 

Procedures for a user 100 forbackup of the electronic value 
information 201 by manipulating a terminal 100 will be explained 




using each means. Operations in the following procedures are 
performed with user under the condition that the IC card 501 
is loaded to the terminal 100. 
(1-1) 

The terminal 100 requests an electronic value information 
list to the electronic information registration means 106. 
(1-2) 

The electronic information registration means 106 
requests the electronic value information list to the electronic 
wallet means 101. 
(1-3) 

The electronic wallet mans 101 generates the electronic 
value information list and sends it to the electronic 
information registration means 106. 
(104) 

The electronic information registration means 106 sends 
the electronic value information list to the terminal 100. 
(1-5) 

The terminal 100 requests the electronic value 
information 201 selected from the electronic value information 
list to the electronic information registration means 106. 
(1-6) 

The electronic information registration means 106 
requests the electronic value information 201 to the electronic 
wallet means 101 . 
(1-7) 

The electronic wallet means 101 obtains the electronic 
value information 201 from the electronic wallet storage means 
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102 and then sends it to the electronic information registration 
means 106. 
(1-8) 

The electronic information registration means 10 5 sends 
the electronic value information 201 to the terminal 100. 
(1-9) 

The terminal 100 sends registration of the electronic 
value information 201 to the electronic safe means 103. 
(1-10) 

The electronic safe means 103 stores the electronic value 
information 201 to the electronic safe storage means 110. 
(1-11) 

The electronic safe means 103 sends the registration 
certificate 301 to the terminal 100. 
(1-12) 

The terminal 100 sends the registration certificate 301 
to the electronic information registration means 106. 
(1-13) 

The electronic information registration means 106 
requests registration of registration certificate 301 to the 
electronic wallet means 101, 
(1-14) 

The electronic wallet means 101 respectively collates the 
content of electronic value information 201 with the digest 302 
of the registration certificate 301 and also Hash calculation 
value of the electronic value information 201 with the Hash value 
XI of the registration certificate 301 and stores, when matching 
is obtained, the registration certificate 301 to the electronic 
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wallet storage means 102 and then sends the end message to the 
electronic information registration means 106, When matching 
is not obtained^ the electronic wallet means 101 sends an error 
message . 
(1-15) 

The electronic information registration means 106 sends 
the end message or error message obtained from the electronic 
wallet means 101 to the terminal 100. 

Here, when the registration certificate 301 is stored 
normally in the electronic wallet storage means 102, the 
electronic value information 201 can be deleted from the 
electronic wallet storage means 102. When a device having a 
smaller storage capacity like an IC card is used, this is an 
effective means to effectively use the storage capacity. 

Next, procedures for a user to recover the electronic value 
information 201 corresponding to the registration certificate 
301 stored in the electronic wallet storage means 102 on the 
electronic wallet storage means 102 by manipulating the terminal 
100 will be explained below. 
(2-1) 

The terminal 100 requests the registration certificate 
list to the electronic information recovery means 107. 
(2-2} 

The electronic information recovery means 107 requests 
the registration certificate list to the electronic wallet means 
101. 
(2-3) 

The electronic wallet means 101 generates the 
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registration certificate list and sends this list to the 

electronic information recovery means 107. 

(2-4) 

The electronic information recovery means 107 sends the 
registration certificate list to the terminal 100. 
(2-5) 

The terminal 100 requests the registration certificate 
301 selected from the registration certificate list to the 
electronic information recovery means 107. 
(2-6) 

The electronic information recovery means 107 requests 
the registration certificate 301 to the electronic wallet means 
101. 
(2-7) 

The electronic wallet means 101 obtains the registration 
certificate 301 from the electronic wallet storage means 102 
and then sends it to the electronic information recovery means 
107. 
(2-8) 

The electronic information recovery means 107 sends the 
registration certificate 301 to the terminal 100. 
(2-9) 

The terminal 100 presents the registration certificate 
301 to the electronic safe means 103 to request acquisition of 
the corresponding electronic value information. 
(2-10) 

The electronic safe means 103 searches and obtains the 
electronic value information 201 using the registration 
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certificate 301 and sends this information to the terininal 100. 
In this case, the electronic safe means 103 collates the content 
of the searched electronic value information with the 
registration certificate 301 and then stops, when mismatching 
is obtained, the recovery process of the electronic value 
information 201. 
(2-11) 

The terminal 100 sends the electronic value information 
201 to the electronic information recovery means 107. 
(2-12) 

The electronic information recovery means 107 requests 
registration of the electronic value information 201 to the 
electronic wallet means 101. 
(2-13) 

The electronic wallet means 101 registers the electronic 
value information 201 to the electronic wallet storage means 
102. 
(2-14) 

The electronic information recovery means 107 sends the 
end message to the terminal 100. 

As explained above, according to the electronic 
informationbackup system of the first embodiment, the 
electronic value information of user can be backed up on the 
electronic safe storage means, the summary of the electronic 
value information backed up can be recognized without inquiry 
to the electronic safe means and the electronic value 
information can be recovered on the electronic wallet storage 
means as required. 
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SECOND EMBODIMENT 

Next, the second embodiment in relation to fourth and fifth 
aspects of the present invention will be explained with 
reference to Figs. 5 to 9 . Fig. 5 is a structural diagram 
illustrating an example of the electronic inf ormationbackup 
system of the second embodiment. This system replaces the 
terminal 100 of the system illustrated in the first embodiment 
(Fig. 1) with a terminal 112, the electronic safe means 103 with 
an electronic safe means 113 and the IC card 501 with an IC card 
502 . The IC card 502 is formed by adding an encrypting/decoding 
means 105, a key storage means 104 and a key management means 
115 to the IC card 501, modifies the electronic information 
registration means 106 to the electronic information 
registration means 120 and also modifies the electronic 
information recovery means 107 to the electronic information 
recovery means 121. 

The encrypting/decoding means 105 is formed comprising 
a software, a storage area for storing this software, an OS for 
interpreting and executing this software and a CPU. The key 
storage means 104 realizes a programmable memory such as EEPROM. 
Here, the encrypting/decoding means 105 and the electronic 
wallet means 101 can use in common the OS and CPU. Moreover, 
the key storage means 104 and electronic wallet storage means 
102 can use in common the EEPROM. 

The key storage means 104 stores, as illustrated in Fig. 
7, an encryption key 401 and a decoding key 402. In this second 
embodiment, a pair of the encrypting key 401 and the decoding 




key 402 stored in the key storage means 104 is generated with 
the encrypting/decoding means 105. The encrypting/decoding 
means 105 uses the public key encryption system, defining the 
encrypting key 401 as a public key and the decoding key 402 as 
a secret key. 

Here, it is also possible to use the common key encryption system 
as the encryption system of the encrypting/decoding means 105. 
In this case, the encrypting key 401 and decoding key 402 become 
the identical key. The key management means 115 has the function 
to obtain the key stored in the key management means 104, the 
function to register a new key to the key storage means 104 and 
the function to delete the existing keys from the key management 
means 104. 

The encrypting/decoding means 105 has the function to 
obtain the encryption key from the key storage means 104 via 
the key management means 115 and return the encrypted electronic 
information attained by encrypting the input electronic 
information with the encryption key 4 01, the function to obtain 
the decoding key 402 from the key storage means 104 via the key 
management means 115 and return the electronic information by 
decoding the input encrypted electronic information with the 
decoding key 402 and the function to generate the encrypted 
information (electronic signature) that is obtained by 
encrypting the Hash value for the input information using the 
encryption key 401. Moreover, on the contrary, such 
encrypting/decoding means 105 also has the function to inspect 
the electronic signature using the decoding key 402. Here, the 
encryption key 401 and the decoding key 402 maybe the encryption 




key of the coinmon key encryption system that is intrinsic to 
the IC card 502. Moreover, the encryption key 401 and decoding 
key 402 respectively may be a pair of keys of the public key 
and secret key of the public key encryption system intrinsic 
to the IC card 502. 

The electronic information registration means 120 has all 
functions identical to that of the electronic information 
registration means 106 of the first embodiment and 
simultaneously has the function to generate the registration 
electronic value information 203 as illustrated in Fig. 6(a) . 
The electronic information registration means 120 obtains the 
encryption electronic value information 202 from the electronic 
value information 201 using the encrypting/decoding means 105, 
generates the digest 302 using the information extracted from 
the electronic value information 201 and also generates the 
registration electronic value information 203 by combining the 
digest 302, encryption electronic value information 202 and the 
signature 303 generated from the information summarized from 
the digest 302 and encryption electronic value information 202 
using the encrypting/decoding means 105. Moreover, such 
electronic information registration means 120 also has the 
function to obtain the key information from the key storage means 
104 via the key management means 115. 

The electronic information recovery means 121 has all 
functions identical to that of the electronic information 
recovery means 107 and simultaneously has the function to 
extract the encryption information value information 202 from 
the registration electronic value information 203 after the 




checking of validity of the signature 303 in the registration 
electronic value information 203 using the encrypting/decoding 
means 105 and then decode the electronic value information 201 
from the encryption electronic value information 2 02 using the 
encrypting/decoding means 105. Moreover, the electronic 
information recovery mean 121 has the function to register the 
key information to the key storage means 104 via the key 
management mean 115. 

The electronic safe means 113 is modified from the software 
of the electronic safe means 103 illustrated in Fig. 1 and the 
electronic safe means 113 can refer to and modify the content 
of the electronic safe storage means 110, When the electronic 
safe means 113 has received the request for registration of the 
registration electronic value information 203, it generates the 
registration certificate 304 illustrated in Fig. 6 (b) using the 
registration electronic value information 203. The flow of 
process to generate the registration certificate 304 will be 
explained below. 

The electronic safe means 113 extracts the digest 302 from 
the registration electronic value information 203. Moreover, 
it generates the value X2 by applying the encryption electronic 
value information 202 to the uni- directional Hash function and 
also obtains the value Y2 by referring to the counter provided 
in the electronic safe means 113. This counter is assumed to 
increase one by one in the ascending sequence for every reference 
and then returns to zero when the value reaches the upper limit. 
These digest 302, Hash value X2 and counter value Y2 are formed 
as a set of registration certificate 304. As the Hash function 




used to generate the value X2, MD5 and SHAl having higher 
dispersion property are used. Since the registration 
certificate 304 includes the information of digest 302, suiramary 
of the electronic value information registered can be detected 
by referring to the registration certificate 304. Here, the 
digest 302 may be a vacant information but in this case, the 
summary of electronic value information cannot be detected from 
the registration certificate 304. 

Moreover, when the electronic safe means 113 has received 
the registration request of the decoding key 402, it generates 
the registration certificate 305 illustrated in Fig. 8 (a) . The 
registration certificate 305 is composed of the digest 305 
indicating this registration certificate corresponds to the key 
information, the Hash value X3 generated from the decoding key 
402 and the counter value Y3 comprised in the electronic safe 
means 113. As illustrated in Fig. 8(b), the digest 305 is 
composed of an information class and a key information 
indicating that the registration certificate corresponds to the 
key information. 

The registration certificate 304 for the electronic value 
information is discriminated from the registration certificate 
305 for the key information from difference between the 
information class included in the registration certificate 304 
for the electronic value information and the information class 
included in the registration certificate 305 corresponding to 
the key information. Thereby, when the electronic safe means 
113 stores the electronic value information and key information 
to the electronic safe storage means 110, the same management 




method can be used for these registration certificates. Fig. 
9 illustrates such management method. 

The electronic safe means 113 as all functions of the 
electronic safe means 103 in the first embodiment and also stores, 
to the electronic safe storage means 110, the registration 
electronic value information 203 as the file 803, the 
registration certificate 304 as the file 804, the decoding key 
402 as the file 805 and registration certificate 305 as the file 
806/ respectively. The Hash value X2 and counter value Y2 as 
the structural element of registration certificate 304, the path 
information of file 803 and the path information of file 804 
are combined as a set and this set is registered as an entry 
of the index file 853, Moreover, the Hash value X3 and counter 
value Y3 as the structural element of registration certificate 
305, path information of file 805 and path information of file 
806 are combined as a set and this set is registered as one entry 
of the index file 853. The index file 853 is the single line 
CSV file of one entry and each line is sorted in the ascending 
sequence with the counter value. When the registration 
certificate is presented to the electronic safe means 113 from 
the terminal 112, the electronic safe means 113 searches, from 
the index file 853 in the electronic safe storage means 110, 
an entry group where the electronic value information 
corresponding to the registration certificate is matched with 
the counter value and further squeezes the entry group where 
the Hash value is matched to extract the entry where the 
registration certificate is perfectly matched. Thereby, the 
electronic value information corresponding to the registration 



• 27 



certificate is searched at a high speed. Here, the index files 
for the electronic value information and key information may 
be discriminated. 

Next, the procedures for a user to backup the electronic 
value information 201 through manipulation of the terminal 112 
will be explained below. The selecting operations in the 
following procedures are performed with a user. 
(1-1) 

The terminal 112 requests the electronic value 
information list to the electronic information registration 
means 12 0. 
(1-2) 

The electronic information registration mans 120 requests 
the electronic value information list to the electronic wallet 
means 101. 
(1-3) 

The electronic wallet means 101 generates the electronic 
value information list and sends this list to the electronic 
information value registration means 120. 
(1-4) 

The electronic information registration means 120 sends 
the electronic value information list to the terminal 112. 
(1-5) 

The terminal 112 notifies selection of the electronic 
value information 201 selected from the electronic value 
information list to the electronic information registration 
means 12 0. 
(1-6) 
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The electronic information registration means 120 
requests the electronic value information 201 to the electronic 
wallet means 101* 
(1-7) 

The electronic wallet means 101 acquires the electronic 
value information 201 from the electronic wallet storage means 
102 and then sends this information to the electronic 
information registration means 120. 
(1-8) 

The electronic information registration means 120 
acquires the encryption electronic value information 202 from 
the electronic value information 201 using the 
encrypting/decoding means 105 and generates the registration 
electronic value information 203 from the electronic value 
information 201 and encryption electronic value information 
202. 
(1-9) 

The electronic information registration means 120 sends 
the registration electronic value information 203 to the 
terminal 112, 
(1-10) 

The terminal 112 requests registration of the 
registration electronic value information 203 to the electronic 
safe means 113 . 
(1-11) 

The electronic safe means 113 stores the registration 
electronic value information 203 to the electronic safe storage 
means 110 and simultaneously generates the registration 



II 29 • 



certificate 304 from the registration electronic value 

information 203. 

(1-12) 

The electronic safe means 113 sends the registration 
certificate 304 to the terminal 100. 
(1-13) 

The terminal 112 sends the registration certificate 304 
to the electronic information registration means 120. 
(1-14) 

The electronic information registration means 120 
requests registration of the registration certificate 204 to 
the electronic wallet means 101. 
(1-15) 

The electronic wallet means 101 collates respectively the 
digest generated from the content of electronic value 
information 201 and the digest 302 of the registration 
certificate 304 with the value obtained by Hash calculation of 
the digest and the Hash value X2 of the registration certificate 
304 and stores, when matching is attained, the registration 
certificate 304 to the electronic wallet storage means 102 and 
then sends the end message to the electronic information 
registration means 120 or sends, when matching is not attained, 
an error message. 
(1-16) 

The electronic information registration means 120 sends 
the end message or error message obtained from the electronic 
wallet means 101 to the terminal 112. 

Next, the procedures for a user to recover, on the 
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electronic wallet storage means 102 by manipulating the terminal 
112, the electronic value information 201 corresponding to the 
registration certificate 304 stored in the electronic wallet 
storage means 102 will be explained below. 
(2-1) 

The terminal 112 requests the registration certificate 
list to the electronic information recovery means 121. 
(2-2) 

The electronic information recovery means 121 requests 
the registration certificate list to the electronic wallet means 
101. 
(2-3) 

The electronic wallet means 101 generates the 
registration certificate list and sends this list to the 
electronic information recovery means 121. 
(2-4) 

The electronic information recovery means 121 sends the 
registration certificate list to the terminal 112. 
(2-5) 

The terminal 112 requests the registration certificate 
304 selected from the registration certificate list to the 
electronic information recovery means 121. 
(2-6) 

The electronic information recovery means 121 requests 
the registration certificate 304 to the electronic wallet means 
101. 
(2-7) 

The electronic wallet means 101 acquires the registration 
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certificate 304 from the electronic wallet means 102 and sends 

it to the electronic information recovery means 121. 

(2-8) 

The electronic information recovery means 121 sends the 
registration certificate 304 to the terminal 112, 
(2-9) 

The terminal 112 presents the registration certificate 
304 to the electronic safe means 113 and requests acquisition 
of the corresponding electronic value information. 
(2-10) 

The electronic safe means 103 searches and acquires the 
registration electronic value information 203 using the 
registration certificate 304 and sends it to the terminal 112. 
In this case, the electronic safe means 103 collates the content 
of the searched electronic value information with the 
registration certificate 304 and stops, when matching is not 
attained, the recovery process of the electronic value 
information 201. 
(2-11) 

The terminal 112 sends the registration electronic value 
information 203 to the electronic information recovery means 
121. 
(2-12) 

When the electronic information recovery means 121 
inspects and recognizes the signature 303of the registration 
electronic value information 203 using the encrypting/decoding 
means 105, the encryption electronic value information 202 
extracted from the registration electronic value information 
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203 is decoded using the encrypting/decoding means 105 to obtain 

the electronic value information 201, 

(2-13) 

The electronic information recovery means 121 requests 
registration of the electronic value information 201 to the 
electronic wallet means 101. 
('2-14) 

The electronic wallet means 101 registers the electronic 
value information 201 to the electronic wallet storage means 
102. 
(2-15) 

The electronic information recovery means 121 sends the 
end message to the terminal 112. 

Moreover^ the procedures for a user to backup the decoding 
key 402 by manipulating the terminal 112 will be explained below. 
The selecting operations in the following procedures are all 
performed with a user. 
(3-1) 

The terminal 112 requests the decoding key 402 to the 
electronic information registration means 120. 
(.3-2) 

The electronic information registration means 120 
requests the decoding key 4 02 to the key management means 115, 
(3-3) 

The key management means 115 acquires the decoding key 
402 from the key storage means 104 and sends this decoding key 
402 to the electronic information registration means 120. 
(3-4) 
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The electronic information registration means 120 sends 
the decoding key 402 to the terminal 112. 
(3-5) 

The terminal 112 requests registration of the decoding 
key 402 to the electronic safe means 113. 
(3-6) 

The electronic safe means 113 stores the decoding key 402 
to the electronic safe storage means 110 and simultaneously 
generates the registration certificate 305. 
(3-7) 

The electronic safe means 113 sends the registration 
certificate 305 to the terminal 112. 
(3-8) 

The terminal 112 sends the registration certificate 305 
to the electronic information registration means 120. 
(3-9) 

The electronic information registration means 12 0 
requests registration of the registration certificate 305 to 
the electronic wallet means 101. 
(3-10) 

The electronic wallet 101 stores the registration 
certificate in the electronic wallet storage means 102 and sends 
the end message to the electronic information registration means 
120. 
(3-11) 

The electronic information registration means 120 sends 
the end message or error message obtained from the electronic 
wallet means 101 to the terminal 112. 
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Next; the procedures for a user to recover^ on the key 
storage means 104, the decoding key 402 corresponding to the 
registration certificate 305 stored in the electronic wallet 
storage means 102 by manipulating the terminal 112 will be 
explained below. 
(4-1) 

The terminal 112 requests the registration certificate 
list to the electronic information recovery means 121, 
(4-2) 

The electronic information recovery means 121 requests 
the registration certificate list to the electronic wallet means 
101 . 
(4-3) 

The electronic wallet means 101 generates the 
registration certificate list and sends it to the electronic 
information recovery means 121. 
(4-4) 

The electronic information recovery means 121 sends the 
registration certificate list to the terminal 112. 
(4-5) 

The terminal 112 requests the registration certificate 
305 selected from the registration certificate list to the 
electronic information recovery means 101 • 
(4-6) 

The electronic information recovery means 121 requests 
the registration certificate 305 to the electronic wallet means 
101. 
(4-7) 




The electronic wallet means 101 acquires the registration 
certificate 305 from the electronic wallet storage means 102 
and sends it to the electronic information recovery means 121. 
(4-8) 

The electronic information recovery means 121 sends the 
registration certificate 305 to the terminal 112. 
(4-9) 

The terminal 112 presents the registration certificate 
305 to the electronic safe means 113 to request acquisition of 
the corresponding decoding key, 
(4-10) 

The electronic safe means 103 searches the decoding key 
402 using the registration certificate 305 and sends it to the 
terminal 112. 
(4-11) 

The terminal 112 sends the decoding key 402 to the 
electronic information recovery means 121. 
(4-12) 

The electronic information recovery means 121 requests 
registration of the decoding key 402 to the key management means 
115. 
(4-13) 

The key management means 115 registers the decoding key 
402 to the key storage means 104. 
(4-14) 

The electronic information recovery means 121 sends the 
end message to the terminal 112. 

Here, communication between the electronic information 
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registration means 120 and electronic safe means 113 may be made 
with the encrypted communication method in order to prevent 
tapping of the communication path including the terminal 112. 
In this case, it is impossible for the terminal 112 to detect 
the content of information. Moreover, communication between 
the electronic information recovery means 121 and the electronic 
safe means 113 also may be made with the encrypted communication 
method in order to prevent tapping of the communication path 
including the terminal 112. In this case, the terminal 112 also 
cannot detect the content of information of communication. 

As explained above, according to the electronic 
information backup system of the second embodiment, the 
electronic value information can be recovered, even when the 
key storage means is destroyed, by encrypting the electronic 
value information of the user using a secret key for the 
electronic safe mans for the purpose ofbackup, locally detecting 
the summary of the backup electronic value information, 
recovering the encryptedbackup electronic value information as 
required from the electronic safe means and then storing the 
decoding key in the electronic safe means. 

THIRD EMBODIMENT 

Next, the third embodiment in relation to a sixth aspect 
of the present invention will be explained with reference to 
Fig. 10. Fig. 10 is a structural diagram illustrating an example 
of the electronic inf ormationbackup system of the third 
embodiment. This system replaces the terminal 112 of the system 
of the second embodiment (Fig. 5) with the terminal 114 and 
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additional provides the electronic safe means 123 for making 
communication with the terminal 114 and the electronic safe 
storage means 122 as a storage device of the electronic safe 
means 123, The electronic safe means 123 and electronic safe 
storage means 122 have the functions identical to that of the 
electronic safe means 113 and electronic safe storage means 110 . 
The terminal 114 has all functions that are identical to the 
functions of the terminal 112 and simultaneously has the 
function to backup the electronic value information and decoding 
key for the electronic safe means 123. 

In the third embodiment, the registration electronic 
value information 203 generated from the electronic value 
information 201 is backed up for the electronic safe means 113and 
the decoding key 402 is also backed up for the electronic safe 
means 123. Thebackup sequence of the decoding key 402 is 
identical to that of the second embodiment, except for that the 
backup destination is changed to the electronic safe means 123 
from the electronic safe means 113. Therefore, the electronic 
value information 201 is never decoded for the electronic safe 
means 113 and electronic safe means 123, unless otherwise there 
is conspiracy by the electronic safe means 113 and electronic 
safe means 123. 

Here, the communication between the electronic 
information registration mans 120 and electronic safe means 113 
may be encrypted in order to prevent the tapping in the 
communication path including the terminal 114, In this case, 
the terminal 114 cannot detect content of information under the 
communication. Moreover, the communication between the 
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electronic information recovery means 121 and electronic safe 
means 113 may be encrypted in order to prevent the tapping in 
the communication path including the terminal 114 . In this case^ 
the terminal 114 cannot detect content of information under the 
communication . 

Moreover, the communication between the electronic 
information registration means 120 and electronic safe means 
123 may also be encrypted in order to prevent the tapping in 
the communication path including the terminal 114 , In this case, 
the terminal 114 cannot detect content of the information under 
the communication. Moreover, the communication between the 
electronic information recovery means 121 and electronic safe 
means 123 may also be encrypted in order to prevent the tapping 
in the communication path including the terminal 114. In this 
case, the terminal 114 cannot detect content of the information 
under the communication. 

As explained above, according to the electronic 
information backup system of the third embodiment, it is 
possible to make it impossible, unless otherwise there is 
conspiracy between two electronic safe means, to obtain the 
original electronic value information by backing up the 
electronic value information of user to the electronic safe 
means through the encryption using a secret key, locally 
detecting the summary of the backed up electronic value 
information, recovering the electronic value information backed 
up through the encryption as required from the electronic safe 
means and storing the decoding key to the electronic safe means 
that is different from that storing the encrypted electronic 
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value information . 

FOURTH EMBODIMENT 

Next, the fourth embodiment in relation to seventh, eighth, 
ninth aspects of the present invention will be explained with 
reference to Fig. 11. Fig. 11 is a structural diagram 
illustrating an example the electronic inf ormationbackup system 
in the fourth embodiment. This system replaces the terminal 
114 of the system of the third embodiment (Fig. 10) with the 
terminal 114 and also replaces the IC card 502 with the IC card 
503. The IC card 503 is formed by adding, to the IC card 502, 
an electronic information dividing means 12 6 and an electronic 
information combining means 127, modifies the electronic 
information registration means 120 to the electronic 
information registration means 124 and the electronic 
information recovery means 121 to the electronic information 
recovery means 125. The electronic information dividing means 
12 6 and electronic information combining means 127 are formed 
of a software, a storage area for storing this software, an OS 
for interpreting and executing this software and a CPU. 

Operations of the fourth embodiment will be explained. 
In this case, only the part different from the second and third 
embodiments will be explained because the basic operations 
thereof are similar to that of the second and third embodiments. 
The electronic information dividing means 12 6 divides the 
electronic value information to the desired number of partial 
electronic information pieces to which the identifiers to 
recover the electronic value information to the original 




electronic value information. The electronic information 
combining means 127 recovers the original electronic value 
information from such all divided electronic information pieces - 
The electronic information registration means 124 acquires a 
plurality of partial electronic information pieces by 
requesting a division of the electronic value information to 
the electronic information dividing means 126 and also acquires 
the same number of partial Information registration 
certificates by registering all partial electronic information 
pieces to the electronic safe means 113. The electronic 
information recovery means 125 acquires the same number of 
partial electronic information pieces by presenting all 
acquired partial information registration certificates to the 
electronic safe means 113 corresponding to respective partial 
information registration certificates and the electronic 
information combining means 127 recovers the electronic value 
information on the electronic wallet means 101 from all acquired 
partial electronic information pieces. 

In the fourth embodiment, the electronic information 
registration means 124 acquires the encryption-divided 
electronic information by encrypting the division electronic 
information to be registered using the encrypting/decoding 
means 105 and also acquires the corresponding registration 
certificate by registering the acquired encryption-divided 
electronic information to the electronic safe means 113, but, 
on the contrary, it is also possible that the encryption-divided 
electronic information is acquired by encrypting the electronic 
value information using the encrypting/ decoding means 105, the 




division-encrypted electronic information is acquired from the 
acquired encryption- divided electronic information using the 
electronic information dividing means 126 and the corresponding 
registration certificate is acquired by registering the 
division-encrypted electronic information to the electronic 
safemeans 113. Moreover^ as explained in the third embodiment , 
it is also possible to backup the encryption-divided electronic 
information for the electronic safe means 113 and backup the 
decoding key for the electronic safe means 123. 

FIFTH EMBODIMENT 

Next^ the fifth embodiment in relation to a tenth aspect 
of the present invention will be explained with reference to 
Fig. 12. Fig. 12 is a structural diagram illustrating an example 
of the electronic inf ormationbackup system of the fifth 
embodiment. This system replaces the terminal 114 of the system 
of the third embodiment (Fig. 10) with the terminal 117 and also 
the IC card 502 with the IC card 504. The IC card 504 adds, 
to the IC card 502, an electronic information coupling means 
130 and an electronic information decoupling means 131, modifies 
the electronic information registration means 120 to an 
electronic information registration means 128 and also the 
electronic information recovery means 121 to an electronic 
information recovery means 129. The electronic information 
coupling means 130 couples a plurality of electronic value 
information pieces and outputs one coupled electronic 
information. The electronic information decoupling means 131 
decouples the coupled electronic information to a plurality of 




original electronic information pieces. The electronic 
information coupling means 130 and electronic information 
decoupling means 131 are formed of a software, a storage area 
for storing this software, an OS for interpreting and executing 
this software and a CPU. 

Operations of this fifth embodiment will be explained 
below. In this case, only the part different from the third 
embodiment will be explained because the basic operations are 
identical to that of the third embodiment. The electronic 
information coupling means 130 generates one coupled electronic 
information from a set of a plurality of electronic value 
information pieces, the electronic information registration 
means 128 registers this coupled electronic information to the 
electronic safe means 113 and acquires the corresponding coupled 
electronic information registration certificate, the 
electronic information recovery means 129 presents this coupled 
electronic information registration certificate and acquires 
the corresponding coupled electronic information from the 
electronic safe means 113 and the electronic information 
decoupling means 131 generates a set of a plurality of original 
electronic value information pieces from the coupled electronic 
information and then recovers it on the electronic wallet means 
101 . 

In the fifth embodiment, the electronic information 
registration means 128 acquires the coupling-encrypted 
electronic information by encrypting the coupling electronic 
information to be registered using the encrypting/decoding 
means 105 and also acquires the corresponding registration 
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certificate by registering the acquired coupling-encrypted 
electronic information to the electronic safe means 113. 
However^ it is also possible to acquire, on the contrary, the 
encryption electronic information by encrypting a plurality of 
electronic value information pieces using the encrypting/ 
decoding means 105 and then obtain the corresponding 
registration certificate by registering the coupling- encrypted 
electronic information to the electronic safe means 113 using 
the electronic information coupling means 130 from the acquired 
encryption electronic information. Moreover, as in the case 
of the third embodiment, the coupling-encrypted electronic 
information is backed up for the electronic safe means 113, while 
the decoding key is backed up for the electronic safe means 123. 

SIXTH EMBODIMENT 

Next, the sixth embodiment in relation to eleventh and 
twentieth aspects of the present invention will be explained 
with reference to Fig. 13. Fig. 13 is a structural diagram 
illustrating an example of the electronic inf ormationbackup 
system of the sixth embodiment . This system combines the fourth 
embodiment (Fig. 11) and fifth embodiment (Fig. 12) and uses 
the new terminal 118 and IC card 505. The IC card 505 comprises 
the electronic information registration means 132 and 
electronic information recovery means 133, electronic dividing 
means 134 and electronic combining means 135, electronic 
information coupling means 135 and electronic information 
decoupling means 137. The other part is identical to the fourth 
and fifth embodiments. 




Operations of the sixth einbodiraent will be explained below, 
but differences of this sixth embodiment from the fourth and 
sixth embodiments are that the decoding key is divided to a couple 
of partial keys, one partial key is registered to one electronic 
safe means 113 by forming a set with the electronic value 
information and the other partial key is registered to the other 
electronic safe means 123 . The electronic information dividing 
means 134 divides, into a plurality of partial keys, the decoding 
key information that is acquired by the electronic information 
registration means 132 from the key storage means 104 via the 
key management means 105, The encrypting/decoding means 105 
encrypts the electronic value information acquired by the 
electronic information registration means 132 from the 
electronic wallet means 101 to obtain the encryption electronic 
information. The electronic information coupling means 136 
couples such encryption electronic information and the partial 
key group A as a part of the divided partial key to output the 
coupled electronic information. The electronic infomation 
registration means 132 obtains the corresponding registration 
certificates by respectively registering the coupled electronic 
information to the electronic safe mans 113 and the partial key 
group B as the remaining partial key to the different electronic 
safe means 123, The electronic information recovery means 133 
presents these registration certificates to the corresponding 
electronic safe means 113 and 123 and acquires the coupled 
electronic information and partial key group B. The electronic 
information decoupling means 137 decouples the coupled 
electronic information into the encryption electronic 




information and the partial key group A, the electronic 
information combining means 135 generates the decoding key by 
combining the partial key group A and partial key group B, the 
encrypting/decoding means 105 outputs the electronic value 
information by decoding the encryption electronic information 
and the electronic information recovery means 133 recovers the 
key information on the key storage means 104 via the key 
management means 115 and also recovers the electronic value 
information on the electronic wallet means 101. 

In above explanation, the electronic value information 
is divided into the two partial information pieces but it may 
also be divided to three or more partial information pieces. 
Moreover, it is also possible to deposit the divided electronic 
value information pieces to only one electronic safe means. In 
addition, it is not always required to deposit all divided 
electronic value information pieces and only the required ones 
may be deposited. Further, it is of course possible that the 
electronic value information itself is divided into a plurality 
of information pieces, as illustrated in Fig. 4, one divided 
electronic information is combined with one divided key 
information and is then registered to one electronic safe means 
113 and the other divided electronic information is combined 
with the other divided key information and is then registered 
to the other electronic safe means 123. In addition, like the 
fifth embodiment, the electronic value information combining 
a plurality of electronic value information pieces may be used 
as the electronic value information. 

With use of the system explained above, since the encrypted 




electronic value information cannot be decoded only by acquiring 
a part of the decoding key, the key information and moreover 
electronic value information can be safely backed up by 
encryption and backup of the electronic value information of 
a user using a secret key for the electronic safe means, locally 
detecting the summary of the backed-up electronic value 
information, recovering, from the electronic safe means, the 
electronic value information backed up as required through the 
encryption and by backing up one divided key to one electronic 
safe server together with the electronic value information 
through the division of the decoding key and then backing up 
the other divided key to the other electronic safe server. 

SEVENTH EMBODTMRNT 

Next, the seventh embodiment in relation to a thirteenth 
aspect of the present invention will be explained with reference 
to Fig. 14. Fig. 14 is a structural diagram illustrating an 
example of the electronic inf ormationbackup system of the 
seventh embodiment. This system replaces the IC card 505 of 
the seventh embodiment (Fig. 13) with the IC card 50 6. The IC 
card 506 holds, for the IC card 505, the original encryption 
seed information 140 that is used by the key storage means 139 
to mathematically generate the decoding key and the decoding 
key generation algorithm 141 to generate the decoding key from 
this encryption seed information. The encrypting/decoding 
means 142 generates the decoding key by multiplying the 
encryption seed information 140 with the decoding key generation 
algorithm 141. The encryption seed information 140 and 
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decoding key generation algorithm 141 may be held from the 
beginning to the key storage means 139 or any one may be held 
and the other may be down-loaded later from the outside, or both 
may also be down-loaded from the outside. As the encryption 
seed information, the prime number or other known information 
may be used and this information may also be replaced not only 
with the decoding key but also with the information that is the 
source information to mathematically generate a pair of the 
encryption key and decoding key. 

Operations of the seventh embodiment will be explained 
but since the basic operations are identical to that of the first 
to sixth embodiments, only different part from these embodiments 
will be explained below. 
(1-1) 

The terminal 118 requests acquisition of the decoding key 
to the encrypting/decoding means 142, 
(1-2) 

The encrypting/decoding means 142 refers to the key 
storage means 139 via the key management means 138 and acquires 
the encryption seed information 140. 
(1-3) 

The encrypting/decoding means 142 transfers the 
encryption seed information 140 to the electronic information 
registration means 132. 
(1-4) 

The electronic information registration means 132 
requests registration of the encryption seed information 140 
to the electronic safe means 123 via the terminal 118. 
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(1-5) 

The electronic safe means 123 stores the encryption seed 
information 140 to the electronic safe means 123 and notifies 
end of registration by sending the encryption seed information 
registration certificate to the terminal 118. 
(1-6) 

The terminal 118 transfers the encryption seed 
registration certificate to the electronic information 
registration means 132, 
(1-7) 

The key management means 138 transfers the encryption seed 
registration certificate to the key storage means 139 and 
deletes the encryption seed information 140 from the key storage 
means 139. 
(2-1) 

The terminal 118 requests the electronic value 
information list to the electronic wallet means 101. The 
electronic wallet means 101 generates the electronic value 
information list and sends it to the terminal 118. 
(2-2) 

The terminal 118 requests presentation of the electronic 
value information selected from the electronic value 
information list to the electronic wallet means 101. The 
electronic wallet means 101 acquires the electronic value 
information from the electronic wallet storage means 102. The 
encrypting/decoding means 142 generates the encryption 
electronic value information from the electronic value 
information and sends this information to the electronic wallet 
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means 101. The electronic wallet means 101 sends the encryption 
electronic value information to the terminal 118 via the 
electronic registration mans 132 » 
(2-3) 

The terminal 118 requests registration of the encryption 
electronic value information to the electronic safe means 113. 
The electronic safe means 113 stores the encryption electronic 
value information to the electronic safe storage means 110, 
generates the electronic information registration certificate 
and sends the registration certificate to the terminal 118. 
{2-4) 

The terminal 118 requests storage of the electronic 
information registration certificate to the electronic wallet 
means 101 via the electronic information registration means 132 . 
The electronic wallet means 101 stores the electronic 
information registration certificate to the electronic wallet 
storage means 102 and sends the end message to the terminal 118. 
(3-1) 

The terminal 118 requests the decoding key to the 
encrypting/decoding means 142 via the electronic information 
recovery means 133. 
(3-2) 

The key management means 138 extracts the encryption seed 
information registration certificate from the key storage means 
139 and transfers the certificate to the encrypting/decoding 
means 142. 
(3-3) 

The encrypting/decoding means 142 transfers the 




50 



encryption seed information registration certificate to the 
electronic information recovery means 133 and the terminal 118 
presents the encryption seed information registration 
certificate to the electronic safe means 123 via the electronic 
information recovery means 133 to request returning of the 
encryption seed information, 
(3-4) 

The electronic safe means 123 extracts the relevant 
encryption seed information from the encryption seed 
information registration certificate from the electronic safe 
storage mans 122 and transfers it to the terminal 118. 
(3-5) 

The encrypting/decoding means 142 receives the decoding 
key generation algorithm 141 from the key storage means 139 via 
the key management means 138 and generates the decoding key by 
multiplying the decoding key generation algorithm 141 with the 
encryption seed information received via the electronic 
information recovery means 133, 
(3-6) 

The encrypting/decoding means 142 stores the recovered 
decoding key to the key management means 139 via the key 
management means 138, 
(3-7) 

The encrypting/decoding means 142 notifies, to the 
terminal 118, that the recovery of the decoding key is completed. 

In the seventh embodiment, the electronic value 
information is registered to the electronic safe means 113 and 
the encryption seed information is registered to the electronic 



#31 * 



safe means 123, but it is also possible that both are registered 
to only one electronic safe means to receive the respective 
registration certificates. Moreover, it is also possible like 
the sixth embodiment that the encryption seed information is 
divided to two information pieces with the electronic dividing 
means 134, one is combined with the electronic value information 
with the electronic coupling means 135 and are then registered 
to the electronic safe means 113, the other divided seed 
information is registered to the other electronic safe means 
123, the electronic value information received from the 
electronic safe mean 113 is divided, at the time of recovery, 
to the electronic value information and one seed information 
with the electronic decoupling means 137 and the divided seed 
information and the other seed information received from the 
electronic safe means 123 are coupled with the electronic 
information coupling means 135 into only one seed information. 

With use of the system explained above, since the 
information recovery is impossible only with acquisition of the 
encryption seed information, the key information and moreover 
the electronic value information can be backed up very safely 
by backing up the electronic value information of the user 
through the encryption using a secret key for the electronic 
safe means, locally detecting the summary of the backed-up 
electronic value information, recovering, from the electronic 
safe means, the electronic value information that is backed 
up through the encryption as required and backing up the original 
encryption seed information in place of backing up the decoding 
key itself to decode the encryption. 
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F.TCTTH EMBODIMENT 

Next, the eighth embodiment in relation to a fourteenth 
aspect of the present invention will be explained with reference 
to Fig. 15, Fig. 15 is a structural diagram illustrating an 
example of the electronic inf ormationbackup system of the eighth 
embodiment . This system replaces the terminal 118 of the system 
of the sixth embodiment (Fig. 13) with the terminal 119 and 
replaces the IC card 505 with the IC card 507. The IC card 507 
modifies the electronic information registration means 132 to 
the electronic information registration means 143 for the IC 
card 505 and also modifies the electronic information recovery 
means 133 to the electronic information recovery means 144. The 
terminal 119 is connected with an owner information input means 
145 and an owner authentication information input means 14 6. 

Operations of this eighth embodiment are explained below 
but since the basic operations are identical to that of the first 
embodiment to sixth embodiment, only the part different from 
these embodiments will be explained. The terminal 119 allows 
input of the intrinsic owner information from the owner 
information input means 145 and also allows input of the owner 
authentication information corresponding to the owner 
information from the owner authentication information input 
means 146. The electronic information registration means 143 
registers a set of the electronic value information and the owner 
authentication information acquired from the owner 
authentication information input means 14 6. The electronic 
information recovery means 144 presents the owner information 
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acquired from the owner information input means 145 to the 
electronic safe means 113 and obtains the electronic value 
information when collation with the owner authentication 
information is completed successfully. The owner information 
and owner authentication information may simply be compared 
using the same information or the value calculated with the 
unidirection function from the owner information may be used 
as the owner authentication information. Moreover, a password 
may also be used as the owner information and a finger print 
or a palm print and a living body information such as iris may 
also be used. 

With use of the system explained above, the authentication 
can be realized with a safe method by backing up through the 
encryption the electronic value information of a user using a 
secret key for the electronic safe means, locally detecting the 
summary of the backed-up electronic value information, 
recovering^ from the electronic safe means, the electronic value 
information backed up through encryption as required, and 
decoding the electronic value information encrypted through 
recovery on the key storage means when the authentication is 
successful even if the decoding key for decoding the encryption 
is lost. 

NINTH EMBODIMENT 

Next, the ninth embodiment in relation to fifteenth, 
sixteenth, seventeenth aspects of the present invention will 
be explained with reference to Fig. 16. Fig. 16 is a structural 
diagram illustrating an example of the electronic 
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inf ormationbackup system of this ninth embodiment of Fig. 16. 
This system replaces the terminal 119 of the system of the eighth 
embodiment (Fig. 15) with the terminal 147 and this terminal 
147 is connected with an owner information input means 145, an 
owner authentication information storage means 148 and an owner 
authentication means 149. 

Operations of the ninth embodiment will be explained below^ 
but since the basic operation is similar to that of the first 
embodiment to sixth embodiment, only the part different from 
these embodiments will be explained. The terminal 147 allows 
input of the intrinsic owner information from the owner 
information input mans 145. The owner authentication 
information storage means 148 holds the owner authentication 
information corresponding to the input owner information. The 
owner authentication means 149 inspects legitimacy by collating 
the input owner infprmation and stored owner authentication 
information. When the owner is authenticated as the legitimate 
owner as a result of inspection, the terminal 147 notifies it 
to the electronic safe means 113 and this electronic safe means 
113 establishes the encryption communication path between the 
electronic information registration means 143 and electronic 
safe means 113, The electronic information registration means 
143 registers the electronic value information to the electronic 
safe means 113 via this encryption communication path and the 
electronic safe means 113 holds a set of the owner authentication 
information corresponding to the result of authentication and 
the electronic value information to the electronic safe storage 
means 110. Thereby, the electronic information recovery means 




144 can acquire the electronic value information corresponding 
to the owner authentication information based on the result of 
authentication via the above encryption communication path. 

Here, it is also possible that a common key that is used 
temporarily with the owner information input means 145 and owner 
authentication means 149 is generated and used in common and 
the owner information is encrypted using this common key and 
it is then transmitted to the owner authentication means 149. 
Moreover, it is also possible that the owner information input 
means 145 encrypts the owner information with a public key 
corresponding to the intrinsic secret key of the owner 
authentication means 149 and then transmits the encrypted owner 
information to the owner authentication means 149. 

Moreover, the owner information and owner authentication 
information can simply be compared using the same information 
and the value obtained by calculating the owner information with 
the unidirectional function may be used as the owner 
authentication information. In addition, as the owner' 
information, a password can be used and a finger print, a palm 
print and a living information such as iris can also be used. 

TENTH EMBODIMENT - - 

Next, the tenth embodiment in relation to eighteenth and 
ninetieth aspects of the present invention will be explained 
with reference to Fig. 17. Fig. 17 is a structural diagram 
illustrating an example of the electronic inf ormationbackup 
system of the tenth embodiment. This system replaces the 
terminal 119 of the system of the eighth embodiment (Fig. 15) 



with the terminal 150 and connects an authentication device read 
means 151 to this terminal 150 and also replaces the electronic 
safe means 113 with the electronic safe means 152, The 
authentication device read means 151 is an IC card reader to 
read the IC card as the authentication device. Moreover, the 
electronic safe means 152 is connected with an authentication 
check means 154 for inspecting legitimacy of the IC card as the 
authentication device based on the information from the 
authentication check information storage means 153. 

Operations of this tenth embodiment will be explained 
below but since the basic operations are identical to those of 
the first embodiment to the sixth embodiment^ only the part 
different from these embodiments will be explained- To the 
terminal 150, the ID information of the IC card as the 
authentication card read by the authentication device read means 

151 is inputted. The terminal 150 sends this ID information 
to the electronic safe means 152. The electronic safe means 

152 sends this ID information to the authentication check means 
154 and this authentication check means 154 reads the 
corresponding ID information from the authentication check 
information storage means 153 and verifies legitimacy through 
the collation. When the owner is authenticated as the 
legitimate owner as a result of verif icationy. the electronic 
safe means 152 sends this information to the terminal 150 to 
form the encryption communication path between the electronic 
information registration means 143 and electronic safe means 
152 and the electronic information registration means 143 
registers the electronic value information to the electronic 
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safe means 152 to this encryption comiu-anication path. The 
electronic safe means 152 holds a set of the owner authentication 
information corresponding to the authentication result and the 
electronic value information to the electronic safe storage 
means 110, Thereby, the electronic information recovery means 
144 can acquire the electronic value information corresponding 
to the owner authentication information based on the 
authentication result via the encryption communication path. 

In the tenth embodiment, an IC card is used as t the 
authentication device and an IC card reader is used as the 
authentication device read means, but it is also possible to 
use the memory card having the security function and memory card 
reader . 

ELEVENTH EMBODIMENT 

Next, the eleventh embodiment in relation to twentieth 
and twenty-first aspects of the present invention will be 
explained with reference to Fig. 18. Fig. 18 is a structural 
diagram illustrating an example of the electronic 
informationbackup system of the eleventh embodiment. This 
system replaces the terminal 119 of the system of the eighth 
embodiment (Fig, 15) with the terminal 160, replaces the IC card 
507 with the IC card 508, replaces the electronic information 
registration means 143 with an electronic registration means 
155, replaces the electronic information recovery means 144 with 
an electronic information recovery means 156, replaces the 
electronic wallet means 101 with an electronic wallet means 157, 
moreover adds an backup condition storage means 158 for holding 
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the condition information to backup the electronic value 
information and a backup object extracting means 159 for 
selecting the backup object from the electronic wallet means 
157 by interpreting thebackup condition obtained from the backup 
condition storage means 158 and replaces the terminal 119 with 
a terminal 150, The electronic information registration means 
145 obtains the corresponding registration certificate by 
automatically registering the electronic value information of 
the backup object to the electronic safe means 113, Thereby 
the electronic value information to be backed up can be selected 
automatically based on the preset condition in place of the 
manual selection by user. 

Operations of the eleventh embodiment will be explained 
below but since the basic operations are identical to that of 
the first embodiment to the sixth embodiment, only the part 
different from these embodiments will be explained. The backup 
condition storage means 158 holds the backup condition 
information and determines the electronic value information to 
be backed up based on such condition information. In this 
eleventh embodiment, it is assumed that thebackup condition 
information includes the initial setting and allows a user to 
generate and change the condition information. As the backup 
condition information, it is possible to use the kind and 
capacity of the electronic value information, vacant memory 
capacity of the electronic wallet storage means 102, effective 
period of the electronic value information and holding start 
time of electronic value information, etc. and combination of 
these data. Here, it is also possible to use the information 
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other than that explained above as thebackup condition in 
addition to the items of the information in the electronic value 
information • 

An example of the backup condition information is 
illustrated in Fig. 19 and Fig. 20. Fig. 19 illustrates an 
example of an electronic value information group on the 
electronic wallet storage means 102. Here, when the backup 
condition is adapted to a movie ticket. Fig, 20(a) illustrates 
the electronic value information group corresponding to the 
backup condition. Fig, 20(b) illustrates the corresponding 
electronic value information group under such backup condition 
that the date is defined as March 15;^ 2000 and there is no 
available date within a month. 

Next, the extraction procedure of the electronic value 
information with a backup object extraction means 159 based on 
such backup condition will then be explained, 
(2-1) 

The backup object extraction means 159 requests the 
electronic value information list to the electronic wallet means 
157. 
(2-2) 

The electronic wallet means 157 refers to the electronic 
wallet storage means 102 to form the electronic value 
information list. 
(2-3) 

The electronic wallet means 157 returns the electronic 
value information list to the backup object extraction means 
159. 
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(2-4) 

The backup object extraction means 159 collates the 
registered backup condition with the list and generates the 
backup object electronic value information list* 
(2-5) 

Thebackup object extraction means 159 transfers the 
backup object electronic value information list to the 
electronic wallet means 157. 
(2-6) 

The electronic wallet means 157 acquires the electronic 
value information group designated with the backup object 
electronic value information list from the electronic wallet 
storage means 102, 
(2-7) 

The encrypting/decoding means 105 encrypts all electronic 
value information pieces included in the electronic value 
information group and generates the encryption electronic value 
information group. 
(2-8) 

All encryption electronic value information pieces 
included in the encryption electronic value information group 
are backed up to the electronic safe means 113 via the terminal 
160 from the electronic information registration means 155. 
(2-9) 

The electronic safe means 113 transfers the registration 
group corresponding to the encryption electronic value 
information group to the electronic wallet means 157 via the 
electronic information recovery means 156 from the terminal 160. 
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(2-10) 

The electronic wallet mans 157 stores the registration 
certificate group in the electronic wallet storage means 102 
and deletes all electronic value information pieces included 
in the electronic value information group from the electronic 
wallet storage means 102. 
(2-11) 

The electronic wallet storage means 157 notifies the end 
of process to the terminal 160. 

As the timing for starting the backup object extraction 
means 159, for example, thebackup process may be started 
automatically depending on the procedures indicated in the steps 
(2-1) to (2-11) by driving thebackup object extraction means 
149 in every constant period. Otherwise, if the storage 
capacity of the electronic wallet storage means 102 is shortage 
when a new electronic value information is registered in the 
electronic wallet storage means and when the backup electronic 
value information is recovered, the backup object extraction 
means 159 can automatically start the backup process depending 
on the procedure explained above. Otherwise, when the drive 
is requested by user, thebackup object extraction mans 159 can 
automatically start thebackup process depending on the 
procedure explained above. Otherwise, the backup object 
extraction means 159 can automatically start the backup process 
depending on the procedure explained above through the 
combination of the conditions. 

Moreover, when the storage capacity of the electronic 
wallet storage means 102 is insufficient, it is allowed for a 
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user manipulating the terminal 160 to select, after a user has 
executed the backup process for the electronic value information 
stored in the current electronic wallet storage means 102 on 
the basis of thebackup condition information, continuation of 
registration of a new electronic value information and recovery 
of the backed-up electronic value information, interruption of 
registration of a new electronic value information and recovery 
of backed-up electronic value information and continuation of 
registration of a new electronic value information and recovery 
of backed-up electronic value information after execution of 
thebackup process by manual selection of the electronic value 
information held in the current electronic value storage means 
102. 

TWELFTH EMBODIMENT 

Next, the twelfth embodiment in relation to twenty-second 
and twenty-third aspects of the present invention will be 
explained with reference to Fig. 21. Fig. 21 is a structural 
diagram illustrating an example of the electronic 
informationbackup system of the twelfth embodiment. This 
system replaces the terminal 114 of the system of the third 
embodiment (Fig. 10) with a terminal 153, the IC card 502 with 
an IC card 509, the electronic information registration means 
120 with an electronic information registration means 161, the 
electronic information recovery means 121 with an electronic 
information recovery means 162 and moreover replaces the 
electronic safe means 113 with an electronic safe means 164, 
the electronic safe means 123 with an electronic safe means 165 
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and connects a couple of electronic safe means 164 and 165 with 
the communication line. Moreover, the terminal 163 connects 
the owner inforination input means 145, owner authentication 
information storage means 148 and owner authentication means 
149 of the ninth embodiment (Fig. 16) . 

Operations of this twelfth embodiment will be explained 
below, but since the basic operations are identical to that of 
the third embodiment and ninth embodiment, only the part 
different from these embodiments will be explained • When the 
owner authentication for the other electronic safe means 165 
to which the decoding key is registered is completed successful 
using the owner information input means 145, owner 
authentication information storage means 148 and owner 
authentication means 149, this electronic safe means 165 
acquires the encryption electronic information through the 
communication with the electronic safe means 164 to which the 
electronic value information is registered. The terminal 163 
acquires the encryption electronic information from the other 
electronic safe means 165 and sends this information to the 
electronic information recovery means 162, The electronic 
information recovery means 162 decodes the encryption 
electronic value information to recover this information on the 
electronic wallet means 101. On the other hand, the 
encrypting/decoding means 105 generates a pair of a new 
encryption key and decoding key, encrypts again the electronic 
value information on the^ electronic wallet means 101 using this 
new encryption key. Thereby, the electronic information 
registration means 161 acquires the registration certificate 



by sending this new encryption electronic value information to 
the electronic safe means 154 via the terminal 163 and also 
acquires the registration certificate by sending a new decoding 
key to the other electronic safe means 165. 

As explained above, when the electronic value information 
and decoding key are stored in different electronic safe means 
for keeping security in this twelfth embodiment, if the decoding 
key is lost and the terminal is destroyed, the electronic value 
information can be recovered since the electronic safe means 
made the communication to return a set of the electronic value 
information and the decoding key to the terminal under the 
condition that the owner is recognized as the legitimate 
information owner through the authentication process* 
Moreover, in the case where the electronic value information 
is not used immediately, the electronic value information is 
encrypted using a new encryption key, this encrypted information 
is sent to one electronic safe means and the decoding key is 
sent to the other electronic safe means. Thereby, the original 
condition can be recovered. 

In each embodiment explained above, when the electronic 
information recovery means recovers the corresponding 
electronic value information on the electronic wallet means by 
presenting the registration certificate, or when a new 
electronic value information is registered on the electronic 
wallet means, if the sufficient capacity for recovery is not 
left on the electronic wallet storage means, the recovery 
process can be intermitted by presenting shortage of capacity 
to user. 



after one week in future is required. 

Moreover^ the itiore effective backup recovery can be 
realized by triggering the start of recovery froinbackup process 
with reference to the timing when the signal receiving condition 
of the portable terminal is improved/ the battery capacity of 
the portable terminal is recovered exceeding the predetermined 
level/ or in every predetermined time, for example, six o'clock 
in the morning where the portable terminal can be used, or when 
the memory capacity of the IC card is recovered exceeding the 
predetermined value/ or the available time limit of the 
electronic value information/ for example, when the electronic 
value information which is available from the tomorrow is 
recovered today. 

In addition/ the read operation with a computer becomes 
possible by realizing the control program of the electronic 
wallet meanS/ electronic safe means, electronic information 
registration means, electronic information recovery means or 
the like with the software and recording this software to a 
storage medium such as a magnetic disc, magneto-optical disc, 
ROM, DVROM or the like. 



CLAIMS 

1. An electronic information backup system, comprising: 
electronic wallet means for management of electronic 
value information, 

electronic safe means for generating and issuing a 
registration certificate by accepting registration of an 
electronic value information and extracting the corresponding 
electronic value information through presentation of said 
registration certificate, 

electronic safe storage means that is the intrinsic 
storage area of the electronic safe means for holding said 
electronic value information corresponding to said registration 
certificate, 

electronic information registration means for acquiring 
said registration certificate by registering said electronic 
value information to said electronic safe means, and 

electronic information recovery means for acquiring said 
electronic value information by presenting said registration 
certificate to said electronic safe means, 

wherein, said electronic information registration means 
acquires the corresponding registration certificate by 
registering the electronic value information obtained from said 
electronic wallet means to said electronic safe means and then 
registers said registration certificate to said electronic 
wallet means, and 

said electronic information recovery means acquires the 
corresponding electronic value information by presenting said 



registration certificate obtained from said electronic wallet 
means to said electronic safe means to recover said information 
on said electronic wallet means. 

2. An electronic inf ormationbackup system according to 
claim 1, wherein said electronic safe means generates a 
registration certificate including the partial information of 
the electronic value information requesting the registration, 

3. An electronic inf ormationbackup system according to 
claim If wherein the electronic value information can be 
registered to a plurality of electronic safe means by generating 
a registration certificate including the own pointer 
information with said electronic safe means. 

4. An electronic information backup system according to 
any one of the claims 1 to 3^ comprising a key storage means 
for storing a set of an encryption key and a decoding key and 
an encrypting/decoding means for executing the encryption of 
said electronic value information using the encryption key and 
also executing the decoding using said decoding key, 

wherein said electronic information registration means 
registers the encryption electronic value information obtaining 
by encrypting the electronic value information obtained from 
said electronic wallet means with said encrypting/decoding 
means to said electronic safe means in order to obtain the 
encryption electronic value information registration 
certificate and said electronic information recovery means 
obtains the corresponding encryption electronic value 
information by presenting said encryption electronic value 
information registration certificate to said electronic safe 




means and also obtains said electronic value information decoded 
with said encrypting/decoding means and then recovers such 
information on said electronic safe means. 

5. An electronic inf ormationbackup system according to 
claim 4, wherein said electronic information registration means 
acquires a key registration certificate by obtaining a key 
information from said key storage means and registering this 
information to said electronic safe means and said electronic 
information recovery means acquires the corresponding key 
information by presenting said key registration certificate to 
said electronic safe means and then recovering said obtained 
key information on said key storage means, 

6. An electronic informationbackup system according to 
claim 4, wherein a decoding key for decoding said encrypted 
electronic value information is registered to the other 
electronic safe means different from said electronic safe means 
to acquire the key registration certificate and said electronic 
information recovery means acquires the corresponding key 
information by presenting said key registration certificate to 
said other electronic safe means and then recovering said 
obtained key information to said key storage means. 

7. An electronic information backup system according to 
claim 4r comprising an electronic information dividing means 
for dividing said electronic value information to the desired 
number of partial electronic information pieces to which an 
identifier for recovering said electronic value information to 
the original electronic value information is respectively added 
and an electronic information combining means for recovering 
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said original electronic value information from said divided 
electronic information pieces, 

wherein said electronic information registration means 
acquires a plurality of partial electronic information pieces 
by requesting division of said electronic value information to 
said electronic information dividing means and also acquires 
respective partial information registration certificates by 
registering the entire part or a part of said partial electronic 
information to the electronic safe means, said electronic 
information recovery means acquires respective corresponding 
partial electronic information pieces by presenting the entire 
part or a part of said partial information registration 
certificates to the electronic safe means that has issued the 
respective partial information registration certificates, and 
said electronic information combining means recovers said 
electronic value information from said obtained partial 
electronic information pieces. 

8. An electronic information backup system according to 
claim If wherein said electronic information registration means 
acquires a plurality of encryption- divided electronic 
information by respectively encrypting, with the 
encrypting/ decoding means, a plurality of divided electronic 
information pieces divided with the • electronic information 
dividing means and also acquires the corresponding registration 
certificates by registering, to the electronic safe means, the 
entire part or a part of a plurality of obtained 
encryption-divided electronic information pieces, 

9, An electronic informationbackup system according to 



71 



claim 1 r wherein said electronic information registration means 
acquires an encryption electronic information by encrypting the 
electronic value information with said encrypting/decoding 
means^ also acquires a plurality of division-encrypted 
electronic information using said electronic information 
dividing means from said acquired encryption electronic 
information and also acquires the corresponding registration 
certificate by registering the entire part or a part of a 
plurality of said division-encrypted electronic information 
pieces to the electronic safe means. 

10. An electronic information backup system according to 
claim 7, comprising an electronic information coupling means 
for coupling a plurality of electronic value information pieces 
to output one coupled electronic information and an electronic 
decoupling means for dividing said coupled electronic 
information to a plurality of original electronic information 
pieces, 

wherein said electronic information coupling means 
generates the coupled electronic information from a set of a 
plurality of electronic value information pieces, said 
electronic information registration means acquires the 
corresponding coupled electronic information registration 
certificate by registering said coupled electronic information 
to said electronic safe means, said electronic information 
recovery means acquires the corresponding coupled electronic 
information from the electronic safe means by presenting said 
coupled electronic information registration certificate and 
said electronic information decoupling means acquires a set of 



in # 

72 



a plurality of said electronic value information pieces from 
said coupled electronic information. 

11. An electronic information backup system according to 
claim 10, wherein said electronic information dividing means 
divides the key information obtained by said electronic 
information registration means from said key storage means into 
a plurality of partial keys, said encrypting/decoding means 
acquires the encryption electronic information by encrypting 
the electronic value information obtained by said electronic 
information registration means from said electronic wallet 
means, said electronic information coupling means acquires the 
coupled electronic information from said encryption electronic 
information and the partial key group A as a part of said partial 
key, said electronic information registration means acquires 
the corresponding registration certificate by registering said 
coupled electronic information and the partial key group B as 
the remaining partial key to different electronic safe means 
respectively, said electronic information recovery means 
acquires said coupled electronic information and said partial 
key group B by presenting said registration certificate to the 
corresponding electronic safe means, said electronic 
information decoupling means isolates said coupled electronic 
information to said encryption electronic information and said 
partial key group A, said electronic information combining means 
combines said partial key group A and said partial key group 
A to generate a key information, said encrypting/decoding means 
decodes said encryption electronic information and acquires 
said electronic value information, and said electronic 



information recovery means acquires said key information to 
recover this information on said key storage means and also 
recovers said electronic value information on the electronic 
wallet means. 

12. An electronic inf ormationbackup system according to 
claim 11^ wherein said electronic information dividing means 
sets the partial key obtained by dividing the key information 
s the original information to generate a pair of keys of the 
encryption key and the decoding key. 

13. An electronic inf ormationbackup system according to 
any one of the claims A, 6f If 10 and 11/ comprising an original 
encryption seed information used to generate the decoding key 
and a decoding key generation algorithm to generate the decoding 
key from said encryption seed information;. 

wherein said electronic information registering means 
acquires the corresponding encryption seed information 
registration certificate by registering said encryption seed 
information to said electronic safe means, said electronic 
information recovery means acquires the corresponding 
encryption seed information from said electronic safe means by 
presenting said encryption seed information registration 
certificate, said encrypting/decoding means generates the 
decoding key by multiplying said encryption seed information 
with said decoding key generation algorithm and said electronic 
information recovery means decodes said electronic value 
information obtained by said electronic information recovery 
means using said decoding key. 

14. An electronic inf ormationbackup system according to 
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any one of the claims 1, 4, 6, 7, 10 and 11^ comprising an owner 
information input means for inputting the intrinsic owner 
information and an owner authentication information input means 
for inputting the corresponding owner authentication 
information to said owner information, 

wherein said electronic information registration means 
registers a set of said electronic value information and the 
owner authentication information obtained from said owner 
authentication information input means to said electronic safe 
means and said electronic information recovery means can acquire 
said electronic value information when collation with said owner 
authentication information is completed successfully by 
presenting the owner information obtained from said owner 
information input means to said electronic safe means. 

15. An electronic inf ormationbackup system according to 
any one of claims 1, 4, 6, 7, 10 and 11, comprising 
an owner information input means for inputting the intrinsic 
owner information, an owner authentication information storage 
means for holding the owner authentication information 
corresponding to said owner information and an owner 
authentication means for inspecting legitimacy by comparing 
said owner information with said owner authentication 
information, 

wherein authentication is performed by presenting the 
owner information inputted from said owner information input 
means to said owner authentication means, forming an encryption 
communication path between said electronic information 
registration means and electronic safe means using the 
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authentication result, said electronic information 
registration means registers said electronic value information 
to the electronic value information through said encryption 
communication path, said electronic safe means holds a set of 
the owner authentication information corresponding to said 
authentication result and said electronic value information to 
the electronic safe means and said electronic information 
recovery means acquires, through said encryption communication 
path, said electronic value information corresponding to said 
owner authentication information corresponding to said 
authentication result, 

16. An electronic informationbackup system according to 
claim 15, wherein said owner information input means and owner 
authentication means generate a common key to use temporarily 
and hold in common and thereafter encrypt the owner information 
with said common key to send the encrypted owner information 
to the owner authentication means. 

17. An electronic informationbackup system according to 
claim 6, wherein said owner information input means encrypts 
the owner information with the public key corresponding to an 
intrinsic secret key of the owner authentication means and said 
owner information input means sends the encrypted owner 
information to the owner authentication means. 

18. An electronic informationbackup system according to 
any one of claims 1, 4, 6, 7, 10 and 11, comprising an 
authentication device read means for reading an authentication 
device used for the owner authentication, an authentication 
check means for inspecting legitimacy of said authentication 




device and an authentication check information storage means 
for storing the information to be compared for checking 
legitimacy of said authentication device with said 
authentication check means, whereby the authentication device 
connected to said authentication device read means and the 
authentication check means mutually check the legitimacy, 

19. An electronic inf ormationbackup system according to 
any one of claims 1, 4, 6, 7, 10 and 11, comprising an 
authentication device read means for reading an authentication 
device used for owner authentication, an authentication check 
means for inspecting legitimacy of said authentication device 
and an authentication check information storage means for 
holding information to be compared for checking legitimacy of 
said authentication device with said authentication deck means, 

wherein said authentication device connected to said 
authentication device read means and authentication check means 
mutually check the legitimacy, an encryption communication path 
is formed between the electronic information registration means 
and electronic safe means using the authentication result, the 
electronic information registration means registers the 
electronic value information to the electronic safe means via 
said encryption communication path, said electronic safe means 
stores a set of the owner authentication information 
corresponding to said authentication result and said electronic 
value information to the electronic safe storage means and said 
electronic information recovery means acquires said electronic 
value information corresponding to said owner authentication 
information corresponding to said authentication result via 




said encryption communication path. 

20. An electronic informationbackup system according to 
any one of claims 1, 4, 6; 7, 10, 11, 14, 15, 18, 19, comprising 
a backup condition storage means for storing the condition 
information for backup of the electronic value information and 
a backup ob j ect extraction means for selecting the backup obj ect 
from said electronic wallet means by interpreting the backup 
condition obtained from said backup condition storage means, 

wherein said electronic information registration means 
acquires the corresponding registration certificate by 
automatically registering said electronic value information 
ofbackup object to said electronic safe means, 

21. An electronic informationbackup system according to 
claim 20, wherein if sufficient capacity is not left on the 
electronic wallet storage means when the electronic information 
recovery means presents the registration certificate to recover 
the corresponding electronic value information on the 
electronic wallet means or to register a new electronic value 
information on the electronic wallet means, the electronic 
information registration means acquires the corresponding 
registration certificate by selecting the electronic value 
information of the backup object from said electronic wallet 
means using saidbackup object extraction means and then 
registering such information to said electronic wallet safe 
means, a vacant capacity is expanded by deleting said electronic 
value information as thebackup object from said electronic 
wallet storage means, and when the sufficient vacant capacity 
is reserved, the electronic information is recovered on said 
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electronic wallet means or a new electronic value information 
is registered. 

22. An electronic inf ormationbackup system according to 
claim 6f wherein when the owner authentication to the other 
electronic safe means registering said decoding key is completed 
successf ally, said other electronic safe means acquires the 
encryption electronic information through the communication 
with the electronic safe means having registered the electronic 
value information other than said decoding key and said 
electronic information recovery means acquires said encrypted 
electronic value information from the other electronic safe 
means and then recovers such electronic value information on 
said electronic wallet means. 

23. An electronic inf ormationbackup system according to 
claim 6, wherein when owner authentication to the other 
electronic safe means registering said decoding key is completed 
successfully, said other electronic safe means acquires the 
encryption electronic information by making communication with 
the electronic safe means registering the electronic value 
information other than said decoding key, said electronic 
information recovery means acquires said encrypted electronic 
value information from said other electronic safe means to 
recover such information on said electronic wallet means, said 
encrypting/decoding means generates a pair of new encryption 
key and decoding key, and said electronic value information is 
encrypted using said new encryption key and said new encryption 
key is sent to said other electronic safe means. 

24. An electronic inf ormationbackup system according to 
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any one of claims 1 to 23, wherein if sufficient capacity for 
information recovery is not remained on the electronic wallet 
means when said electronic information recovery means presents 
the registration certificate to recover the corresponding 
electronic value information on the electronic wallet means or 
registers a new electronic value information on the electronic 
wallet means, shortage of capacity is presented to a user to 
suspend the recovery job. 

25, An electronic inf ormationbackup system according to 
any one of claims 1 to 24, wherein said electronic information 
registration means acquires the corresponding registration 
certificate by registering the electronic value information 
obtained from said electronic wallet means to said electronic 
safe means and deletes, when said registration certificate is 
normally registered to said electronic wallet means, said 
electronic value information from said electronic wallet means . 

2 6. An electronic inf ormationbackup system according to 
any one of the claims 1 to 25, wherein said electronic information 
recovery means acquires the corresponding electronic value 
information from said electronic safe means by presenting the 
registration certificate obtained from said electronic wallet 
means and deletes, when said electronic value information is 
normally recovered on the electronic wallet means, said 
registration certificate from said electronic wallet means and 
also deletes said electronic value information from said 
electronic safe means. 

27. An electronic inf ormationbackup system, comprising 
a backup system that acquires a registration certificate by 



registering an electronic value information to an external 
server^r stores said electronic value information and 
registration certificate to a storage medium and recovers the 
electronic value information by presenting the registration 
certificate to said external server. 

28. An electronic inf ormationbackup system according to 
claim llf wherein said registration certificate includes 
partial information of the electronic value information. 

29. An electronic inf ormationbackup system, comprising 
a backup means for acquiring an encryption electronic value 
information by encrypting the electronic value information 
requested for registration using an encryption key and said 
encryption electronic value information is then registered to 
the external server. 

30. An electronic inf ormationbackup system, comprising 
a backup means for acquiring the corresponding encryption 
electronic value information by presenting the registration 
certificate requested for recovery to the external server and 
recovers said encryption electronic value information to the 
electronic value information using the decoding key. 

31. An electronic inf ormationbackup system, comprising 
a backup means that acquires a plurality of partial electronic 
inf ormation pieces by dividing the electronic value information 
requested for registration, also acquires the partial 
information registration certificates in the same number as said 
partial electronic information pieces by registering all 
partial electronic information pieces to the desired number of 
external servers and also stores all partial information 
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registration certificates to a storage memory. 

32. An electronic inf ormationbackup system according to 
claim 31, wherein all partial information registration 
certificates are presented to the external server to acquire 
the same number of partial electronic information pieces and 
said all partial electronic information pieces are combined to 
recover the original electronic value information and then to 
be stored in said storage medium. 

33. An electronic inf ormationbackup system, comprising 
a backup means that acquires the encryption electronic value 
information by encrypting the electronic value inf ormation with 
the encryption key corresponding to the decoding key, forms a 
plurality of partial decoding keys by dividing said decoding 
key, acquiring the coupled electronic information by coupling 
one or more partial decoding keys and said encryption electronic 
value information, also acquiring the coupled registration 
certificate by registering said coupled electronic information 
to the external server, registering the remaining partial 
decoding keys to the other external server and then storing said 
coupled registration certificate to a storage medium. 

34. An electronic informationbackup system according to 
claim 33, wherein said coupled electronic information is 
acquired by presenting said coupled registration certificate 
to said external server, said coupled electronic information 
is decoupled into said encryption electronic value information 
and one or more partial decoding keys, said remaining partial 
decoding keys are acquired from said other external server, said 
decoupled partial decoding keys and said obtained partial 




decoding keys are combined to recover the original decoding key 
and said encryption electronic value information is recovered 
to the original electronic value information using said 
recovered decoding key and is then stored in said storage medium. 

35. An electronic inf ormationbackup system according to 
any one of claims 27 to 34^ wherein when the registration 
certificate corresponding to the electronic value information 
is acquired from the external server, said electronic value 
information corresponding to said registration certificate is 
deleted from said storage medium. 

36. An electronic inf ormationbackup system according to 
any one of claims 27 to 35^- wherein the electronic value 
information as thebackup object is selected from said storage 
medium by interpreting the preset backup condition and said 
selected electronic value information is automatically 
registered to said external server to acquires the corresponding 
registration certificate . 

37. An electronic inf ormationbackup system according to 
any one of claims 27 to 36, wherein a set of the authentication 
information and electronic value information is registered to 
said external server. 

38. An electronic inf ormationbackup system according to 
claim 37, wherein said electronic value information can be 
acquired when the input owner information is presented to said 
external server and the input owner information is matched with 
the authentication information registered to said external 
server . 

39. An electronic inf ormationbackup system according to 
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any one of claims 27 to 36, wherein said electronic value 
information can be acquired when the owner authentication 
information corresponding to the input owner information is once 
stored in the storage memory and said owner information is 
matched with said owner authentication information • 

40. An electronic inf ormationbackup system according to 
claim 39, wherein the electronic value information 
corresponding to said owner information can be acquired by 
forming the encryption communication path for said external 
server when said owner information is matched with said owner 
authentication information, 

41. An electronic informationbackup system according to 
any one of claim 27 to 36, wherein said electronic value 
information is acquired when an IC card recording the 
owner authentication information is read, such authentication 
information is sent to the external server and said external 
server checks legitimacy of said authentication information. 

42. An electronic informationbackup system according to 
claim 41, wherein the electronic value information 
corresponding to said authentication information is acquired 
by forming an encryption communication path to said external 
server when legitimacy of said authentication information is 
checked, 

43. An electronic informationbackup system according to 
any one of claims 27 or 36, wherein when the owner authentication 
to the other external server registering the decoding key is 
completed successfully, said other external server makes 
communication with the external server registering the 



electronic value information other than said decoding key to 
acquire the encryption electronic information and the 
encryption electronic information is coupled with said decoding 
key • 

44. An electronic inf oriuationbackup system according to 
claim 43/ wherein after said encryption electronic information 
is acquired and is then decoded, said electronic value 
information is encrypted using a new encryption key, said 
encryption electronic information is registered to said 
external server and simultaneously the decoding key is 
registered to the other external server. 
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ABSTRACT OF THE DISCLOSURE 

There is provided an electronic inf ormationbackup system 
to safely backup the electronic value information such as 
electronic money or electronic ticket or the like on a server 
through communication, eliminate illegal behavior at thebackup 
time and recovery time and also recover the electronic value 
information from the backup condition at the emergency time such 
as the case where the key information has been lost. In this 
system, the electronic value information is encrypted and 
registered on the electronic safe server to receive the 
registration certificate, thereafter the registration 
certificate is presented to the server to receive the encryption 
electronic value information and this information is then 
decoded with the decoding key as the data. The decoding key 
may be stored to the other server . Moreover, it is also possible 
to store the numerical stream of ciphers as the source of the 
decoding key to the server and such numerical stream may also 
be generated as the decoding key using the decoding key 
generation algorithm in the terminal side. If the decoding key 
is lost, the owner authentication information is inspected and 
thereafter the decoding key can be received from the server. 
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